Editing Secure Shell (section)

==Standards documentation==
The following [[Request for Comments|RFC]] publications by the [[IETF]] "secsh" [[working group]] document SSH-2 as a proposed [[Internet standard]].
* {{IETF RFC|4250}} – ''The Secure Shell (SSH) Protocol Assigned Numbers''
* {{IETF RFC|4251}} – ''The Secure Shell (SSH) Protocol Architecture''
* {{IETF RFC|4252}} – ''The Secure Shell (SSH) Authentication Protocol''
* {{IETF RFC|4253}} – ''The Secure Shell (SSH) Transport Layer Protocol''
* {{IETF RFC|4254}} – ''The Secure Shell (SSH) Connection Protocol''
* {{IETF RFC|4255}} – ''Using DNS to Securely Publish Secure Shell (SSH) Key Fingerprints''
* {{IETF RFC|4256}} – ''Generic Message Exchange Authentication for the Secure Shell Protocol (SSH)''
* {{IETF RFC|4335}} – ''The Secure Shell (SSH) Session Channel Break Extension''
* {{IETF RFC|4344}} – ''The Secure Shell (SSH) Transport Layer Encryption Modes''
* {{IETF RFC|4345}} – ''Improved Arcfour Modes for the Secure Shell (SSH) Transport Layer Protocol''

The protocol specifications were later updated by the following publications:
* {{IETF RFC|4419}} – ''Diffie-Hellman Group Exchange for the Secure Shell (SSH) Transport Layer Protocol'' (March 2006)
* {{IETF RFC|4432}} – ''RSA Key Exchange for the Secure Shell (SSH) Transport Layer Protocol'' (March 2006)
* {{IETF RFC|4462}} – ''Generic Security Service Application Program Interface (GSS-API) Authentication and Key Exchange for the Secure Shell (SSH) Protocol'' (May 2006)
* {{IETF RFC|4716}} – ''The Secure Shell (SSH) Public Key File Format'' (November 2006)
* {{IETF RFC|4819}} – ''Secure Shell Public Key Subsystem'' (March 2007)
* {{IETF RFC|5647}} – ''AES Galois Counter Mode for the Secure Shell Transport Layer Protocol'' (August 2009)
* {{IETF RFC|5656}} – ''Elliptic Curve Algorithm Integration in the Secure Shell Transport Layer'' (December 2009)
* {{IETF RFC|6187}} – ''X.509v3 Certificates for Secure Shell Authentication'' (March 2011)
* {{IETF RFC|6239}} – ''Suite B Cryptographic Suites for Secure Shell (SSH)'' (May 2011)
* {{IETF RFC|6594}} – ''Use of the SHA-256 Algorithm with RSA, Digital Signature Algorithm (DSA), and Elliptic Curve DSA (ECDSA) in SSHFP Resource Records'' (April 2012)
* {{IETF RFC|6668}} – ''SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol'' (July 2012)
* {{IETF RFC|7479}} – ''[[Ed25519]] SSHFP Resource Records'' (March 2015)
* {{IETF RFC|5592}} – ''Secure Shell Transport Model for the Simple Network Management Protocol (SNMP)'' (June 2009)
* {{IETF RFC|6242}} – ''Using the NETCONF Protocol over Secure Shell (SSH)'' (June 2011)
* {{IETF RFC|8332}} – ''Use of RSA Keys with SHA-256 and SHA-512 in the Secure Shell (SSH) Protocol'' (March 2018)
* {{IETF RFC|8709}} – ''Ed25519 and Ed448 Public Key Algorithms for the Secure Shell (SSH) Protocol'' (February 2020)
* [https://datatracker.ietf.org/doc/html/draft-gerhards-syslog-transport-ssh draft-gerhards-syslog-transport-ssh] – ''SSH transport mapping for SYSLOG'' (July 2006)
* [https://datatracker.ietf.org/doc/html/draft-ietf-secsh-filexfer draft-ietf-secsh-filexfer] – ''SSH File Transfer Protocol'' (July 2006)
* [https://datatracker.ietf.org/doc/html/draft-ietf-sshm-ssh-agent draft-ietf-sshm-ssh-agent] - SSH Agent Protocol (March 2025)

In addition, the [[OpenSSH]] project includes several vendor protocol specifications/extensions:
* [https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/usr.bin/ssh/PROTOCOL?content-type=text/plain OpenSSH PROTOCOL overview]
* [https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/usr.bin/ssh/PROTOCOL.certkeys?content-type=text/plain OpenSSH certificate/key overview]
* [https://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/src/usr.bin/ssh/PROTOCOL.u2f?content-type=text/plain OpenSSH FIDO/u2f support]